PT-2026-52029 · Warpdotdev · Warp

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-48725

NVD

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable 00 until 0.2026.05.06.15.42.stable 01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger clipboard reads or writes without a separate confirmation step. This crosses the trust boundary between untrusted terminal output and the user's local desktop clipboard. This vulnerability is fixed in 0.2026.05.06.15.42.stable 01.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-48725

Affected Products

Warp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48725 · Security Note
• https://github.com/warpdotdev/warp/security/advisories/GHSA-wgqj-4c26-7c4g · Note
• https://github.com/warpdotdev/warp/commit/b1a41d0b1aba9f40db1e5ceb695183452a894003 · Note